Back to Blog

Opt-Out Guide

National Public Data Opt Out: Remove Your Info After the Massive 2024 Breach

7 min read

In 2024, National Public Data suffered one of the largest data breaches on record, exposing approximately 2.9 billion records including Social Security numbers, home addresses, and family member information. Here's what happened, how to check if you were affected, and what to do about it.

Breach at a Glance

  • Records exposed: ~2.9 billion
  • Data included: Full names, SSNs, addresses (current and historical), relatives
  • Breach disclosed: August 2024
  • Company status: Filed for bankruptcy, October 2024
  • Ranking: One of the 3 largest data breaches in US history by record count

What Is National Public Data?

National Public Data (nationalpublicdata.com) was a background check aggregator that compiled records on virtually every US adult. The company harvested data from public records (court filings, voter rolls, property records, government databases) along with data purchased from other brokers, building profiles that included full legal names, current and historical addresses, phone numbers, Social Security numbers, and family relationships.

NPD sold access to individuals and businesses for background check purposes. Like most data brokers, it operated largely under the radar. Most people had never heard of it, yet it held detailed files on virtually every American adult.

The 2024 Breach: What Happened

In April 2024, a hacker group calling itself USDoD posted 2.9 billion records on the dark web forum BreachForums, offering the dataset for sale at $3.5 million. The data included full legal names, current and historical addresses going back decades, phone numbers, Social Security numbers, and detailed information about relatives.

NPD did not publicly acknowledge the breach until August 2024, months after the data had already circulated among cybercriminals. By that point, security researchers had confirmed the dataset's authenticity by cross-referencing it with known personal records.

In October 2024, National Public Data filed for bankruptcy, partly due to the dozens of class action lawsuits filed after the breach. The company is winding down operations.

Was Your Data Exposed?

Given the scale of the breach (2.9 billion records for a US population of roughly 335 million adults), it is highly likely that your data was included, possibly multiple times across different historical records. Social Security numbers for the vast majority of US adults are believed to have been included.

To check your exposure:

  1. 1

    Run a free scan with GhostVault

    Checks your email and name against breach databases including NPD and 500+ broker sites.

  2. 2

    Check HaveIBeenPwned (haveibeenpwned.com)

    Troy Hunt's breach database includes the NPD dataset. Enter your email to see if it appeared.

  3. 3

    Monitor your credit reports

    Visit annualcreditreport.com and check all three bureaus for accounts you don't recognize.

  4. 4

    Watch for IRS notices

    If someone files a tax return using your SSN, the IRS will contact you. Monitor your IRS account online.

How to Remove Yourself From National Public Data

NPD maintains an opt-out page, though its long-term availability is uncertain given the company's bankruptcy filing.

  1. 1Visit nationalpublicdata.com/opt-out.html in your browser.
  2. 2Enter your first name, last name, state, and date of birth.
  3. 3Review the records that appear and identify your listing.
  4. 4Select your record and submit the removal request.
  5. 5Complete any email verification step if prompted.
  6. 6Allow 24–72 hours for processing.
Important caveat: NPD filed for bankruptcy in October 2024. While the opt-out page may still be functional, the company's operations are winding down. More critically, your data was almost certainly copied and redistributed by other data brokers before or after the breach. Removing from NPD alone provides minimal protection at this point.

What to Do If Your SSN Was Exposed

If your Social Security number was part of the NPD breach — which is likely for most US adults — act on the following steps as soon as possible:

1. Place a credit freeze at all three bureaus

A credit freeze is free and prevents anyone from opening new credit accounts in your name. Freeze at Equifax (equifax.com/personal/credit-report-services), Experian (experian.com/freeze), and TransUnion (transunion.com/credit-freeze). Do all three.

2. Place a fraud alert

A fraud alert requires lenders to take extra steps to verify your identity before extending credit. A standard alert lasts 90 days (free, renew as needed). If you've been a victim of identity theft, you qualify for a 7-year extended alert.

3. Review your credit reports

Visit annualcreditreport.com and pull all three reports. Look for accounts, inquiries, or addresses you don't recognize. Report any errors to the bureau and to the creditor.

4. File IRS Form 14039 if needed

If you suspect someone has used your SSN to file a fraudulent tax return, submit Form 14039 (Identity Theft Affidavit) to the IRS. You can also request an IRS Identity Protection PIN to prevent future fraudulent filings.

5. Remove yourself from data brokers

Your SSN alone is less valuable to criminals if they can't pair it with your current address, employer, and family members. Removing your supplemental personal data from the 500+ broker sites that hold it makes you a harder target.

The Bigger Problem

National Public Data aggregated information from hundreds of other data brokers and public record sources. Even with NPD gone, the same data, your addresses, relatives, employment history, and in many cases your SSN, exists on 500+ other data broker sites that are still operational today.

Removing your profile from a bankrupt company that no longer serves your data provides minimal real-world protection. The meaningful action is removing your data from the active data broker ecosystem, the sites that are actively returning your information in response to searches right now. See the complete background check opt-out guide for step-by-step instructions across all major sites.

See Where Your Data Is Exposed Across 500+ Broker Sites

GhostVault's free scan checks your name and email against hundreds of active data broker sites — not just NPD. Start with a scan, then let GhostVault handle the removals automatically for $3.99/month.